Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
simple machines simple machines forum vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-3072
Simple Machines Forum (SMF) 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13, when running in PHP prior to 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.
Simple Machines Simple Machines Forum
NA
CVE-2006-4467
Simple Machines Forum (SMF) 1.1RCx prior to 1.1RC3, and 1.0.x prior to 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote malicious users to perform direc...
Simple Machines Simple Machines Forum
NA
CVE-2007-2546
Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and previous versions allows remote malicious users to hijack web sessions by setting the PHPSESSID parameter.
Simple Machines Simple Machines Forum
NA
CVE-2005-4159
NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the start parameter. NOTE: the vendor...
Simple Machines Simple Machines Forum
NA
CVE-2008-3073
Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 has unknown impact and attack vectors, probably cross-site scripting (XSS), related to "use of the html-tag."
Simple Machines Simple Machines Forum
NA
CVE-2006-7013
QueryString.php in Simple Machines Forum (SMF) 1.0.7 and previous versions, and 1.1rc2 and previous versions, allows remote malicious users to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more r...
Simple Machines Simple Machines Forum
NA
CVE-2006-5503
Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote malicious users to inject arbitrary web script or HTML via the action parameter.
Simple Machines Simple Machines Forum 1.1 Rc2
1 EDB exploit
NA
CVE-2007-0399
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) recipient or (2) BCC field when selecting send in a pm action.
Simple Machines Simple Machines Forum 1.1 Rc3
1 EDB exploit
NA
CVE-2007-3942
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote malicious users to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerabi...
Simple Machines Simple Machines Forum 1.1.3
NA
CVE-2007-3308
Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote malicious users to pass the CAPTCHA test via an automated brute-force attack.
Simple Machines Simple Machines Forum 1.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »